$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft File: 85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft (raw, json) Hash identifier: L+hczboZknyeJQ4UWycFr/RwO9BQd7Bmty9HYHU7FLM= Subject key identifier: 46:E6:53:E2:35:9E:A7:B9:A8:0C:69:69:53:9C:3F:89:CE:DB:6B:5C Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Certificate serial: 010D0C9F4328584A6E6D6A5CF069B4AF0FBB9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft Manifest number: 010D0C9F4328584A073AE6AF97B0EAF2D0F396A8 Signing time: Sun 06 Jul 2025 19:00:04 +0000 Manifest this update: Sun 06 Jul 2025 19:00:04 +0000 Manifest next update: Tue 08 Jul 2025 19:00:00 +0000 Files and hashes: 1: 19040811-4eb3-3658-9b7f-629d4f5813cd.roa (hash: 1ErvF8H3H9Ox9/iUYJ4pnSI1KNdy78tATsWDuB/SQkA=) 2: 4813c162-1bde-3df9-8e1c-20feca6a82e1.roa (hash: avndNHW1jn4u1ulmAjhitjF0XjfNsrxUMDjVBV66r/s=) 3: 85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl (hash: 4RPqIWk0pmupP3vu0SMfHCx1dDMnr2g5Z0ui3yF78/4=) 4: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (hash: GN6yGrfrtENr7iCn5a9w2Rh1cB7H9NEnWLRCvcLF7rw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6e:6d:6a:5c:f0:69:b4:af:0f:bb:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c Validity Not Before: Jul 6 19:00:04 2025 GMT Not After : Jul 8 19:00:00 2025 GMT Subject: CN=99271f4a-7443-4bbc-80a2-30ad3e8547a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:71:47:a1:67:2e:47:7d:1c:2f:46:10:7a:18: 28:78:7d:73:ed:31:da:04:03:3d:63:e5:fa:f9:53: b5:31:32:e4:e3:a0:e9:fb:1f:9a:33:cc:61:37:63: 2e:47:d4:6c:76:35:33:ff:87:ad:6c:55:9d:57:d7: 45:24:6b:0f:ad:a1:2f:d3:f8:c1:00:c5:24:e8:bc: 0d:41:32:a7:f8:e7:43:15:c7:d8:1d:3e:81:85:3c: dc:d2:1e:1d:da:af:99:ae:12:3f:21:cd:5b:f5:de: f2:d6:70:83:11:26:86:4d:00:01:55:41:69:25:9d: 0f:96:11:b0:96:fb:18:60:cc:60:83:74:26:59:ce: c3:0c:ad:a7:4a:97:39:c3:23:bc:84:90:cb:1e:ae: 61:44:2e:61:de:41:29:d8:ca:ec:f9:75:10:21:73: 99:16:80:1d:67:46:d9:a3:ea:28:02:c0:2b:22:b8: b7:60:98:51:67:9f:e8:df:04:aa:97:da:46:6d:00: 12:84:4e:8a:bb:43:2a:8f:2f:66:00:35:f6:31:23: 43:f2:a7:70:2d:12:a9:e4:91:72:4d:75:8f:f9:56: 2e:28:af:b5:49:91:08:3d:98:43:b1:e4:f2:26:0f: be:0d:79:86:8a:a8:05:cd:1c:a7:6f:67:fd:70:1c: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:53:E2:35:9E:A7:B9:A8:0C:69:69:53:9C:3F:89:CE:DB:6B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl X509v3 Authority Key Identifier: keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b7:f7:01:d0:16:cb:7a:56:d6:6c:bc:ed:2d:24:19:16:67: 4f:d4:07:b1:6e:b7:64:75:2a:09:b4:b3:6d:d6:e8:91:11:70: c1:2b:93:65:41:d8:f7:59:10:ed:38:f0:41:8f:b9:ee:e4:4a: 74:51:5b:92:3b:7d:b1:a9:07:d2:88:b8:f2:35:79:9b:bb:bf: 20:28:ec:60:9b:80:c2:f5:93:10:d7:3e:9c:ef:d4:a3:0b:1a: f8:96:9b:76:a9:d8:1a:a5:2a:92:d3:39:78:16:f2:c7:db:24: b2:07:db:20:58:65:2d:93:06:a2:97:3d:40:d2:7f:b9:56:3d: 12:57:10:4e:c2:27:1f:de:3f:c7:e8:b7:6c:af:2e:ea:21:7e: 8f:d4:b7:12:10:c7:a3:af:62:02:73:4b:a9:70:55:73:9e:54: bb:be:64:8d:77:e3:29:c9:7f:1e:fd:ae:3f:99:b4:76:5a:cf: b4:52:9e:64:57:10:40:57:58:6d:c0:86:b7:a6:bc:01:94:7d: 77:76:d9:07:b3:81:0e:50:14:3d:76:18:8e:01:a1:d2:3f:aa: ee:89:18:b3:31:a5:0c:32:b1:0f:6b:cd:50:c3:72:ab:0a:67: c0:de:ed:f6:d3:8d:d9:84:1f:2a:c1:57:41:8e:aa:0d:c3:f7: bc:bc:fd:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpubWpc8Gm0rw+7mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl ZTFjMB4XDTI1MDcwNjE5MDAwNFoXDTI1MDcwODE5MDAwMFowLzEtMCsGA1UEAxMk OTkyNzFmNGEtNzQ0My00YmJjLTgwYTItMzBhZDNlODU0N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nFHoWcuR30cL0YQehgoeH1z7THaBAM9Y+X6 +VO1MTLk46Dp+x+aM8xhN2MuR9RsdjUz/4etbFWdV9dFJGsPraEv0/jBAMUk6LwN QTKn+OdDFcfYHT6BhTzc0h4d2q+ZrhI/Ic1b9d7y1nCDESaGTQABVUFpJZ0PlhGw lvsYYMxgg3QmWc7DDK2nSpc5wyO8hJDLHq5hRC5h3kEp2Mrs+XUQIXOZFoAdZ0bZ o+ooAsArIri3YJhRZ5/o3wSql9pGbQAShE6Ku0Mqjy9mADX2MSND8qdwLRKp5JFy TXWP+VYuKK+1SZEIPZhDseTyJg++DXmGiqgFzRynb2f9cBzNEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEbmU+I1nqe5qAxpaVOcP4nO22tcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvODViMmRlNzMtMWQ0Mi00 NTk1LThjYjEtOWU4MmQ4NzNlZTFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy ZDg3M2VlMWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqt/cB0BbLelbWbLztLSQZ FmdP1AexbrdkdSoJtLNt1uiREXDBK5NlQdj3WRDtOPBBj7nu5Ep0UVuSO32xqQfS iLjyNXmbu78gKOxgm4DC9ZMQ1z6c79SjCxr4lpt2qdgapSqS0zl4FvLH2ySyB9sg WGUtkwailz1A0n+5Vj0SVxBOwicf3j/H6Ldsry7qIX6P1LcSEMejr2ICc0upcFVz nlS7vmSNd+MpyX8e/a4/mbR2Ws+0Up5kVxBAV1htwIa3prwBlH13dtkHs4EOUBQ9 dhiOAaHSP6ruiRizMaUMMrEPa81Qw3KrCmfA3u32043ZhB8qwVdBjqoNw/e8vP2w -----END CERTIFICATE-----Generated at Mon Jul 7 08:45:28 2025 by rpki-client